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Top Stories 

• Severe storms knocked out power to roughly 45,000 CenterPoint Energy customers April 
27 in Houston. - Associated Press (See item 1) 

• A fuel tanker overturned on Highway 38 near Angelus Oaks, California, spilling 4,000 
gallons of fuel and prompting the closure of a 3 mile stretch of the highway for at least a 
week and perhaps longer. - Los Angeles Times (See item 18) 

• The U.S. Department of Justice announced the arrest and charge of a man believed to have 
sent the U.S. President and 2 other public officials letters laced with ricin. Authorities 
arrested him April 27 at his home in Tupelo, Mississippi. - MSN News (See item 34 ) 

• A sophisticated Apache backdoor being used to redirect traffic to Web sites hosting the 
Blackhole exploit kit was found and analyzed by researchers. - Help Net Security (See 
item 38) 
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Energy Sector 



1. April 28, Associated Press - (Texas) Thousands without power in Houston after 
storms. Severe storms knocked out power to roughly 45,000 CenterPoint Energy 
customers in Houston April 27. Crews were working to restore service. 

Source: http://www.dallasnews.com/news/local-news/2013Q428-thousands-without- 
power-in-houston-after-storms.ece 

2. April 28, KWCH 12 Hutchinson - (Kansas) Westar believes copper thefts severely 
injures suspect. Authorities are looking for a suspect after an employee at Westar 
discovered grounding cables and copper wire were missing April 27. Crews determined 
a thief caused over $150,000 in wire loss and damage, knocking out power in south 
Wichita, and likely suffered injuries during the theft. 

Source: http://www.kwch.com/news/crimewatch/news-les-kwch-westar-believes- 
copper-theft-severelv-iniures-suspect-20130428,0,7561825.story 

3. April 26, Seattle Times - (Washington) 4 accused of stealing $120K in copper wire 
from Seattle City Light. Authorities arrested 4 suspects who claimed to be members 
of the Cherokee Nation and asked Seattle City Light for a small amount of copper to 
donate. They were granted access to the company’s South Service Center April 23 and 
took roughly 40,000 pounds of insulated scrap copper wire worth about $120,000. 
Police found all 4 individuals and took them into custody April 25. 

Source: http://blogs.seattletimes.com/today/2013/04/4-accused-of-stealing-120k-in- 
copper-wire-from-seattle-city-light/ 

For another story, see item 9 



[ Return to top ] 

Chemical Industry Sector 

See items 14 , 16, 17, and 20 
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Nuclear Reactors, Materials, and Waste Sector 

4. April 28, Beaver County Times - (Pennsylvania) New Brighton man charged with 
stealing copper from nuclear plant property. A former plant contractor allegedly 
stole more than 1,400 pounds of copper from the Beaver Valley Nuclear Power Station 
in Shippingport since January. 

Source: http://www.timesonline.com/news/police fire courts/new-brighton-man- 
charged-with-stealing-copper-from-nuclear-plant/article a7d71fdb-ldf9-5166-a29e- 
db89d9a90a98.html 

5. April 26, WAND 17 Decatur/Springfield/Champaign - (Illinois) Clinton power station 
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takes unit offline for repairs. The Clinton Power Station manually took a reactor unit 
offline after low hydraulic pressure in the turbine control system was detected April 26. 
Source: http://www.wandtv.com/story/22090873/clinton-power-station-takes-unit- 
offline-for-repairs 



T Return to top i 

Critical Manufacturing Sector 

6. April 29, Reuters - (International) Honda recalls almost 46,000 Fit cars in U.S., 
Canada. Honda announced the recall of around 46,000 model year 2012 and 2013 Fit 
Sport vehicles in the U.S. and Canada due to problem in the vehicles’ stability control 
system software. 

Source: http://news.vahoo.com/honda-recalls-almost-46-000-fit-cars-u-120745774.html 

7. April 29, Reuters - (National) Nissan recalls over 123,000 Altimas in U.S. for spare 
tire issue. Nissan announced the recall of more than 123,000 model year 2013 Altima 
vehicles that may have over- or under-inflated spare tires which could fail. 

Source: http://www.chicagotribune.com/news/sns-rt-us-nissan-recallbre93s0de- 
20130429,0,6369636.story 

8. April 29, Associated Press - (National) Subaru recalls more than 10,000 Forester 
wagons. Subaru announced the recall of around 10,000 model year 2014 Forester 
wagons due to floor mats that may curl when exposed to heat. 

Source: http://www.10tv.com/content/stories/2013/04/29/us-subaru-recall.html 

9. April 25, Associated Press - (Utah) Utah copper mine landslide will hurt State 
economy. Kennecott Utah Copper announced the company may be able to resume 
limited operations within days, but cleanup will take months after an April 10 landslide 
piled waste rock inside the mining pit near Salt Lake City. The company warned that 
they will run out of copper for customers in the upcoming months. 

Source: http://www.wfaa.com/news/national/204722901.html 

[ Return to top ] 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



10. April 26, Puget Sound Business Journal - (Washington) FDIC lawsuit seeks $46 
million from executives of failed Frontier bank. The Federal Deposit Insurance 
Corporation filed a lawsuit against 12 former directors and officers of the failed 
Frontier Bank of Everett seeking $46 million in damages. The accused allegedly were 
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negligent in approving loans and acted contrary to prudent practices. 

Source: http://www.bizioumals.com/seattle/news/2013/04/26/fdic-seeks-46-million- 
from-executi ves .html 



11. April 26, City News Service - (California) Ex-notary arrested, accused of mortgage- 
fraud conspiracy. A former San Diego public notary was arrested for allegedly 
running a mortgage fraud scheme involving around 30 properties that caused losses of 
over $5 million. 

Source: http://www.sandiego6.com/news/local/Ex-Notarv-Accused-of-Mortgage- 
Fraud-Conspiracy-204965781.html 
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Transportation Systems Sector 

12. April 28, KHNL 13 Honolulu - (Hawaii) Kamehameha Hwy. overpass reopened 
after fatal accident. A fatal accident that left one dead, prompted authorities to close 
H-3 heading eastbound at the Kamehameha Highway Overpass for more than 4 hours. 
Source: http://www.hawaiinewsnow.com/storv/22101542/h-3-closed-at-kameharneha- 
hwv-overpass-due-to-motorcycle-accident-details-at-hawaiinewsnowcom 

13. April 28, WCMH 4 Columbus - (Ohio) Charter bus crash causes minor injuries. 
Authorities closed the ramp from Interstate 70 eastbound to Interstate 270 
northbound in Columbus for 4 and one-half hours after a charter bus crashed injuring 
10 children and 4 adults. 

Source: http://www.nbc4i.com/story/22099373/charter-bus-crashes-on-westside 

14. April 28, St. Pete Patch - (Florida) Chemical spill forces road closure on Tyrone 
Boulevard. A chemical spill prompted authorities to urge motorists to avoid the area of 
St. Petersburg near Park Street and Tyrone Boulevard as officials were expected to be 
working on cleaning the spill for several hours. 

Source: http://stpete.patch.com/articles/chemical-spill-forces-road-closure-on-tyrone- 
boulevard 

15. April 27, Charleston Post and Courier - (South Carolina) Eastbound 1-26 reopened 
after authorities mop up huge gasoline spill. An accident involving a tanker truck 
closed Interstate 26 to eastbound traffic from mile marker 187 near Pringletown to mile 
marker 194 near Jedburg for almost 12 hours as crews worked to clean gasoline 
spillage from the tanker. 

Source: 

http://www.postandcourier.com/article/20130427/NEWS/130429329/1268/eastbound- 

i-26-reopened-after-authorities-mop-up-huge-gasoline-spill 



16. April 26, KWWL 7 Waterloo - (Iowa) Bremer County road reopens after anhydrous 
leak. A Bremer County road was closed for more than 19 hours due to an anhydrous 
ammonia leak from a tank that broke loose while it was being towed. 
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Source: http://www.kwwl.com/storv/22088454/2013/04/26/bremer-countv-road- 
reopens-following-anhydrous-leak 

17. April 26, WBTV 3 Charlotte - (North Carolina) Two lanes of 1-85 south in Charlotte 
reopen after HazMat spill. A semi-truck broke apart along Interstate 85 southbound 
just past Little Rock Road in west Charlotte, spilling a 55-gallon drum of sodium 
bisulfide and prompting authorities close all lanes of the freeway for 5 hours while 
crews cleared up the spillage. Two news trucks were also quarantined and 
decontaminated after driving over the corrosive liquid. 

Source: http://www.wbtv.com/story/22085151/chemical-spill-shuts-down-i-85-in- 
charlotte 



18. April 26, Los Angeles Times - (California) California 38 may shut down at least a 
week after tanker spill. A fuel tanker overturned on Highway 38 near Angelus Oaks 
spilling 4,000 gallons of fuel, prompting the closure of a narrow 3 mile stretch of the 
highway for at least a week and perhaps several weeks. The fuel seeped into a nearby 
creek that feeds into the Santa Ana River, potentially contaminating local water 
supplies. 

Source: http://www.latimes.com/local/lanow/la-me-ln-california-38-closure-mav-last- 
weeks— 20130426,0,5656576.story 



19. April 25, Jersey Journal - (New Jersey) Jersey City man charges with having 
explosives on train 8 days before Marathon bombings: cops. A man from Jersey 
City carried 2 homemade explosives on a New Jersey Transit train April 5. Authorities 
charged the man after they also found explosive devices in his home. 

Source: 

http://www.ni.com/hudson/index.ssf/2013/04/iersev city man arrested on tr.html 
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Food and Agriculture Sector 

20. April 28, Bakersfield Californian - (California) Chemical release sickens 20, three 
hospitalized. An insecticide was accidentally released April 28 at the Paramount Farms 
warehouse facility near Lost Hills, sickening 20 people and sending 3 to a nearby 
hospital. 

Source: http://www.bakersfieldcalifomian.com/local/breaking- 
news/xl322505274/Chemical-release-sickens-20-three-hospitalized 

21. April 27, Food Safety News - (National) E. coli 0121 outbreak associated with Farm 
Rich expands. Five victims in 4 States were added to the list of confirmed cases in the 
rare Shiga toxin-producing Escherichia coli 0121 outbreak associated with 2 Farm 
Rich brand frozen products, bringing the total number of individuals infected to 32. 
Source: http://www.foodsafetvnews.com/2013/04/e-coli-ol21-outbreak-associated- 
with-farm-rich-expands/#.UX5fKLWkr44 
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22. April 26, U.S. Food and Drug Administration - (National) Orville Redenbacher’s 



Classic Kettle Korn ready-to-eat popcorn recalled due to undeclared milk 
allergen. ConAgra Foods, Inc. voluntarily recalled packages of its Orville 
Redenbacher’s Classic Kettle Korn flavor ready-to-eat popcorn because the products 
may contain an undeclared allergen, milk, after some packages may have been 
inadvertently filled with white cheddar flavored popcorn. 

Source: http://www.fda.gov/Safety/Recalls/ucm349849.htm 
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Water and Wastewater Systems Sector 

23. April 28, Kalamazoo Gazette - (Michigan) Sewer spills 1,800 gallons of raw sewage 
in Kalamazoo’s Oakland/Winchell neighborhood. A 1,800 gallon raw sewage spill 
in Kalamazoo was caused by a sewer blockage which led to an overflow at a manhole 
April 27. City officials advised residents of the Oakland/Winchell neighborhood to stay 
out of the spill area until an assessment can be completed. 

Source: 

http://www.mlive.com/news/kalamazoo/index.ssf/2013/04/sewer spills 1800 gallons 
of r.html 

24. April 27, Chatsworth Times - (Georgia) Chatsworth Water Works Commission 
Carters Lake water plant intrusion. An April 26 break-in at the Carters Lake Water 
Treatment Plant prompted the Georgia Department of Natural Resources 
Environmental Protection Division to shut down the plant indefinitely to conduct a 
bacteriological analysis and get approval for the plant’s restart. A Boil Water Advisory 
was also issued. 

Source: http://www.chatsworthtimes.com/view/full story/22384597/article- 
Chatsworth-Water-Works-Commission-Carters-Lake -Water-Plant-Intrusion? 

25. April 26, Pantagraph - (Illinois) Illinois EPA to increase water testing near Clinton 
Landfill. The Illinois Environmental Protection Agency will mandate independent 
testing of groundwater from the area around the Clinton Landfill in order to increase its 
oversight of hazardous chemical waste and protect the Mahomet Aquifer, which the 
landfill is over. 

Source: http://www.pantagraph.com/news/local/illinois-epa-to-increase-water-testing- 
near-chnton-landfill/artiele be3648e()-aed6- 1 1 e2-925b-(K) 1 a4bcf887a.html 

26. April 26, KMOV 4 St. Louis - (Missouri) MSD works to stop raw sewage spill; 500 
million gallons have entered river. High river levels have caused an estimated 
500,000,000 gallons of sewage to be discharged from the Bissell Point sewage 
treatment plant in St. Louis since April 21 after two pumps failed at the plant. Nine 
temporary pumps were brought in to reduce the flow, but the plant still lacks capacity, 
leading to continued overflows. 

27. April 26, Associated Press - (Michigan) Grand Rapids: 429M gallons of wastewater 
released. Grand Rapids retention basins suffered overflows from recent rainfall and 
flooding, sending 429 million gallons of partially treated sewage into the Grand River. 
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Source: http://www.13abc.com/story/22090094/grand-rapids-429m-gallons-of- 
wastewater-released 



For another story, see item 18 
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Healthcare and Public Health Sector 

28. April 28, KHOU 11 Houston - (Texas) Kindred Hospital evacuated after losing 
power overnight. Patients and staff were evacuated from Kindred Hospital in Houston 
after severe weather caused the facility to lose power April 28. Power was restored and 
patients will be allowed to return to the hospital once testing is complete. 

Source: http://www.khou.com/news/local/Kindred-Hospital-evacuated-after-losing- 
po wer-o vernight-205 138811 .html 

29. April 26, WSTM 3 Syracuse/WTVH 5 Syracuse - (New York) Laptop with 
confidential patient information stolen from Upstate Hospital. Upstate University 
Hospital in Syracuse notified 283 patients that a laptop containing some personal 
medical information was stolen from the hospital in March. Officials do not believe any 
information was misused and are investigating. 

Source: http://www.cnycentral.com/news/storv.aspx?id=890363#.UX6vtrXvtKA 

30. April 26, Salt Lake City Deseret News - (Utah) Life Flight informs patients of 
possible confidential information breach. Life Flight notified 842 patients that flew 
on their helicopters during the last 3 months of 2004 that their personal information 
may have been compromised after the information was inadvertently put on an 
employee Web site. The files have been moved behind a secure firewall and the 
company does not believe any information was used inappropriately. 

Source: http://www.deseretnews.com/article/865579041/Life-Flight-informs-patients- 
of-possible-confidential-information-breach.html 

31 .April 26, Health IT Security - (New Hampshire) Child and Family Services reports 
patient data breach. Twenty three patients from Child and Family Services of New 
Hampshire were alerted after the non-profit agency discovered a March 19 theft of files 
from their main branch in Manchester. Medicaid numbers, specific health information, 
and notes were included in the files, but officials do not believe the information has 
been fraudulently used. 

Source: http://healthitsecuritv.com/2013/04/26/child-and-family-services-reports- 
patient-data-breach/ 



[ Return to top ] 



Government Facilities Sector 

32. April 29, WJW 8 Cleveland - (Ohio) Threat closes Cuyahoga Falls High School. 
Officials closed Cuyahoga Falls High School April 29 after the principal received an 
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email threatening a device would go off during the school day. Authorities are 
investigating the incident. 

Source: http://fox8.com/2013/04/29/threat-closes-cuvahoga-falls-high-school/ 

33. April 28, KRTV 3 Great Falls - (Montana) 300-acre Park County fire under control. 
Officials in Park County contained a wildfire that burned through 300 acres April 27. 
Source: http://www.krtv.com/news/300-acre-park-countv-fire-under-control/ 

34. April 28, MSN News - (Mississippi) Miss, man gets bioweapon charge in ricin case. 
The U.S. Department of Justice announced the arrest and charge of a man believed to 
have sent the U.S. President and 2 other public officials letters laced with ricin. 
Authorities arrested him April 27 at his home in Tupelo. 

Source: http://news.msn.com/crime-iustice/miss-man-gets-bioweapon-charge-in-ricin- 
case 



35. April 26, Associated Press - (Wyoming) Yellowstone National Park’s Black Sand 
Basin closed for boardwalk repair. The National Park Service temporarily closed off 
Yellowstone National Park’s Black Sand Basin for repairs after 120 feet of the 
boardwalk was damaged by thermal water. The re-opening is date will be announced in 
May. 

Source: http://trib.com/news/state-and-regional/yellowstone-national-park-s-black- 
sand-basin-closed-for-board walk/article 4ad229b7-b91e-5e36-840c- 
4fcad5c23e84.html 
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Emergency Services Sector 

36. April 29, Bluefield Daily Telegraph - (West Virginia) Stevens Correctional Center: 
Bomb threat evacuates 400 inmates. Stevens Correctional Center in Welch was 
evacuated for nearly 5 hours April 28 after a bomb threat was phoned in to the facility. 
Officials conducted a search and allowed inmates to return to the building after giving 
the all-clear. 

Source: http://bdtonline.com/local/x508487064/Stevens-Correctional-Center-Bomb- 
threat-evacuates-400-inmates 

37. April 28, WGHP 8 High Point - (North Carolina) 911 service outage reported in 
northwestern Randolph County. Customers using landlines to call 9-1-1 services in 
Randolph County were faced with an outage April 28. CenturyLink and North State 
customers were affected as providers worked to fix the problem. 

Source: http ://myfox8 .com/20 1 3/04/28/9 1 1 -service-outage-reported-in-northwestem- 
randolph-county/ 
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Information Technology Sector 

38. April 29, Help Net Security - (International) Sophisticated Apache backdoor in the 
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wild. A sophisticated Apache backdoor dubbed “Linux/Cdorked.A” being used to 
redirect traffic to Web sites hosting the Blackhole exploit kit was found and 
analyzed by researchers at ESET and Sucuri. 

Source: http://www.net-security.org/secworld.php7km4836 

39. April 29, The H - (International) Hackers access personal data of 50 million 
LivingSocial users. The operators of LivingSocial contacted about 50 million 
customers and asked them to change their passwords after attackers may have 
compromised encrypted passwords and personal information. 

Source: http://www.h-online.com/security/news/item/Hackers-access-personal-data- 
of-50-million-LivingSocial-users-1851667.html 

40. April 29, Softpedia - (International) 11 “Guardian” Twitter accounts hijacked by 
Syrian Electronic Army. Members of the Syrian Electronic Army hacktivist group 
hijacked several Twitter accounts belonging to the U.K. newspaper The Guardian 
using phishing emails to gather the information needed. 

Source: http://news.softpedia.com/news/ll-Guardian-Twitter-Accounts-Hiiacked- 
bv-Syrian-Electronic-Army-349343.shtml 

41. April 29, Softpedia - (International) Umbraco developers warn users of severe 
vulnerability in integration Web services. The developers of the Umbraco content 
management service alerted customers to a vulnerability in the platform’s integration 
Web services affecting all versions. 

Source: http://news.softpedia.com/news/Umbraco-Developers-Warn-Users-of- 
Severe-Vulnerability-in-Integration-Web-Services-349167.shtml 

42. April 29, Computerworld - (International) McAfee spots Adobe Reader PDF- 
tracking flaw. McAfee researchers found a security flaw in Adobe Reader that can 
show when a user opened a document and where the file is located on users’ 
systems. 

Source: 

http://www.computerworld.eom/s/article/9238752/McAfee spots Adobe Reader P 
DF tracking flaw 

43. April 26, Krebs on Security - (International) Dutchman arrested in Spamhaus 
DDoS. A Dutch national was arrested by authorities in Spain in connection with the 
massive distributed denial of service (DDoS) attack against Spamhaus in March. 
Source: http://krebsonsecuritv.com/2013/04/dutchman-arrested-in-spamhaus-ddos/ 

44. April 26, SC Magazine - (International) Travnet trojan compresses files to send 
more info to data thieves. A new trojan dubbed “Travnet” was spotted by 
researchers being used in a targeted operation. The malware can gather user 
information and steal files by compressing them and then sending them back to 
botnet operators. 

Source: http://www.scmagazine.com/travnet-troian-compresses-files-to-send-more- 
info-to-data-thieves/article/290486/ 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

45. April 29, Idaho State Journal - (Idaho) Walmart bomb threat: store was evacuated, 
searched, then reopened. A Chubbuck Walmart was evacuated, closed, searched, and 
reopened after about 2 hours following a bomb threat that was called in, with no 
hazards found. 

Source: http://www.idahostateioumal.com/news/local/article 51f539de-b06b-lle2- 
884e-0Qla4bcf887a.html 

46. April 28, Associated Press - (New Mexico) 4 choir members stabbed during New 
Mexico church service. A man was subdued and later arrested at the St. Jude 
Thaddeus Church in Albuquerque after jumping several pews and stabbing four 
members of the choir. 

Source : http://abcnews.go.com/US/choir-members-stabbed-rnexico-church- 
service/story?id= 1 9062253#.UX6pxrXvtKA 

47. April 27, WXIN 59 Indianapolis - (Indiana) Firefighter injured in Plainfield 
apartment fire. An April 27 fire at the Gladden Farms Apartments led to at least 
$100,000 in damages and injured a firefighter. 

Source : http://fox59.corn/2013/04/27/crews-fight-apartment-fire-in- 
plainfield/#axzz2RrxiPdwt 

48. April 27, Marin Independent Journal - (New Jersey) Bon Air shopping center 
evacuated after bank robbery, bomb threat. A man was arrested after allegedly 
robbing a bank and claiming he left a bomb, which prompted a 3 hour evacuation of a 
portion of the shopping center and parking lot to allow for a search, which resulted in 
no findings. The suspected bank thief was detained. 

Source : http://www.marinii.com/rosskentfieldgreenbrae/ci 23 123372/bon- air- 
shopping-center-evacuated-after-bank-robbery 

49. April 27, WFBS 4 Miami - (Florida) Gables Hotel evacuated due to gas leak. A crew 
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working on a fiber optics line near the Westin Colonnade hotel in Coral Gables hit a 
four-inch gas line, prompting an indefinite evacuation of the hotel and a disruption of 
two wedding parties and an optometry conference as fumes from the substantial leak 
spread several blocks. 

Source: http://miami.cbslocal.com/2013/04/27/gables-hotel-evacuated-due-to-gas- 
leak / 



50. April 26, WEAU 13 Eau Claire - (Wisconsin) 75 people evacuated from apartment 
complex after fire. An explosion in the boiler room of the Wedgewood Common 
Apartments in La Crosse caused about 75 people to be evacuated for several hours. 
Firefighter believed a water heater malfunction was responsible. 

Source: http://www.weau.com/news/headlines/75-people-evacuated-from-apartment- 
complex-after-fire-2048 8 25 9 1 .html?ref=59 1 
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Dams Sector 

51. April 26, WLS 7 Chicago - (Illinois) Marseilles dam safe, but significant damage 
to 5 of 8 gates. Recent assessments made by the Rock Island District of the U.S. 
Army Corps of Engineers (ACE) revealed the seven barges which broke free from a 
tugboat during a recent storm caused damage to five of the eight gates at the 
Marseilles Lock and Dam and will require significant repairs. 

Source: http://abclocal.go.com/wls/storv?section=news/local&id=9080841 
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